Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/bBC5DimsR1mpnIOoV1BMTaGtEzk.roa
File:                     bBC5DimsR1mpnIOoV1BMTaGtEzk.roa (raw, json)
Hash identifier:          UCO5g30HRRo1lyZuqKXPsoyXGSnJI5R7FYiJ3HzFaA8=
Subject key identifier:   6C:10:B9:0E:29:AC:47:59:A9:9C:83:A8:57:50:4C:4D:A1:AD:13:39
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       6B
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/bBC5DimsR1mpnIOoV1BMTaGtEzk.roa
Signing time:             Tue 31 Mar 2026 07:37:11 +0000
ROA not before:           Tue 31 Mar 2026 07:37:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        2001:380:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: Mar 31 07:37:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6C10B90E29AC4759A99C83A857504C4DA1AD1339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:65:97:86:74:cd:49:36:28:e1:74:74:b3:
                    f1:80:4c:94:8c:7a:63:a9:4b:f9:56:97:cb:1d:31:
                    ed:8b:26:ec:11:98:fa:a7:96:8c:93:12:6b:a9:ce:
                    3f:e2:75:d0:9b:26:a0:0b:90:4c:03:26:c6:0b:35:
                    3d:14:ac:6f:23:2b:1d:68:9d:f6:26:f8:5c:06:bf:
                    f5:b8:81:cf:e4:1f:17:44:4f:a9:15:7d:25:9b:93:
                    73:33:a8:f6:ee:4b:e0:85:95:95:18:6f:01:ae:44:
                    72:59:2d:0a:58:d0:47:96:c6:48:76:9d:e7:5e:8e:
                    f8:10:99:de:6d:86:6c:90:25:42:32:ba:77:b8:23:
                    02:4b:b7:9f:80:05:18:c6:fd:02:83:6e:fc:6d:07:
                    ea:25:41:53:8a:ae:4a:e0:c0:03:d1:f6:72:12:9e:
                    41:e8:a6:93:78:0c:9f:d3:45:50:29:96:1d:de:14:
                    b2:bf:de:d5:f4:80:37:82:55:6a:1c:4b:99:68:4a:
                    18:f3:fb:f3:c9:88:8f:01:e9:ab:f0:e1:1e:18:38:
                    d4:51:5c:b4:7f:d0:b0:03:46:20:f8:cd:7d:84:bf:
                    43:7c:c3:a7:89:6d:22:ab:7f:dc:00:59:00:c6:8e:
                    93:5c:9c:b0:ba:3f:f8:3f:79:45:25:c0:bf:f2:7b:
                    30:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:10:B9:0E:29:AC:47:59:A9:9C:83:A8:57:50:4C:4D:A1:AD:13:39
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/bBC5DimsR1mpnIOoV1BMTaGtEzk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:380:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:4d:5c:8c:67:c4:dc:e4:25:1e:93:ee:15:31:7d:69:e7:
         21:22:9d:31:2d:ee:2f:29:67:be:0c:22:59:95:93:42:66:8f:
         99:86:f2:9d:15:d0:63:6b:5c:35:0a:4d:6c:7b:33:c7:28:14:
         8c:74:b4:ec:22:13:26:00:7b:41:47:6f:70:fb:d1:e0:2c:6c:
         86:d4:05:f5:c0:a6:e2:ed:ec:c5:0a:71:26:27:e4:e0:9e:23:
         7f:28:b1:d5:3d:54:2e:65:dc:89:3b:26:d3:d4:79:d3:b5:cc:
         de:1f:ea:39:1d:3d:9e:91:ff:81:94:5c:ee:a1:b8:5e:aa:17:
         3c:97:9a:a8:c1:1b:90:9e:52:82:c3:56:36:8d:7f:da:70:fe:
         c3:7d:35:81:e6:83:30:09:98:2a:bb:83:95:08:78:8a:82:3a:
         a4:ad:44:72:a2:e4:57:f0:f5:4e:10:8d:49:cd:ef:4b:02:bd:
         54:28:4f:a4:63:1f:ab:33:ba:11:2b:5e:96:7d:6e:5f:d1:eb:
         33:b2:c1:ec:5b:e1:ee:49:db:4e:16:a9:85:ba:52:80:b1:98:
         e2:bd:d6:17:06:5f:4e:ab:38:dd:07:7c:02:c2:18:c5:39:18:
         70:4d:ef:39:e5:ed:5a:5f:b3:d9:6b:14:b4:d9:d2:84:de:a1:
         68:22:af:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:26 2026 by rpki-client